| CVE-2026-114270 |
The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing,…
|
5.3
Medium
|
Oct 29, 2026 |
| CVE-2026-113488 |
The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a…
|
6.8
Medium
|
Oct 28, 2026 |
| CVE-2026-113494 |
The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a…
|
2.7
Low
|
Oct 28, 2026 |
| CVE-2026-113487 |
The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link…
|
6.8
Medium
|
Oct 28, 2026 |
| CVE-2026-113674 |
The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by…
|
3.7
Low
|
Oct 24, 2026 |
| CVE-2026-113490 |
The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a…
|
5.3
Medium
|
Oct 24, 2026 |
| CVE-2026-113491 |
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local…
|
6.4
Medium
|
Oct 24, 2026 |
| CVE-2026-113492 |
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading…
|
5.3
Medium
|
Oct 24, 2026 |
| CVE-2026-113493 |
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes…
|
6.8
Medium
|
Oct 24, 2026 |
| CVE-2026-113673 |
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing…
|
7.2
High
|
Oct 24, 2026 |
| CVE-2026-113489 |
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing…
|
4.3
Medium
|
Oct 24, 2026 |
| CVE-2026-16988 |
The GeoDirectory WordPress plugin before 2.8.169 does not perform any authorization check when returning map marker…
|
7.5
High
|
Aug 9, 2026 |
| CVE-2025-15677 |
The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before…
|
3.5
Low
|
Aug 5, 2026 |
| CVE-2026-16968 |
The GeoDirectory WordPress plugin before 2.8.168 does not restrict a user-search handler to users allowed to list…
|
6.5
Medium
|
Aug 5, 2026 |
| CVE-2025-6200 |
The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before…
|
5.9
Medium
|
Jul 11, 2025 |
| CVE-2023-0278 |
The GeoDirectory WordPress plugin before 2.2.24 does not properly sanitise and escape a parameter before using it in a…
|
7.2
High
|
Feb 27, 2023 |
| CVE-2022-4775 |
The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before…
|
5.4
Medium
|
Jan 23, 2023 |